Python for Threat Intelligence

Explore the world of threat intelligence and discover how Python can automate tedious tasks, enabling analysts to tackle complex security challenges. Learn about major hacks, their perpetrators, and motivations in this 23-minute PyCon US talk by Aaron Stephens. Gain insights into the development process of a team without dedicated developers, balancing productivity with process, and achieving success at scale. Dive into practical Python tools and techniques used in threat intelligence, including data modeling, analysis, and generating detections. Understand how to apply libraries like argparse, logging, rich, and httpx to enhance your workflow. Perfect for part-time developers and analysts looking to leverage Python for more efficient threat intelligence operations.

Intro
Threat Intelligence
Data Modeling & Analysis
Applying Python
argparse
logging
rich
httpx
Model Or It Didn't Happen
Modeling Network Scan Data
Inspecting Files
Generating Detections
Engineering without Engineers